CT-CRM ("we", "our", or "us") values your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you use our Customer Relationship Management (CRM) application.

1. Information We Collect

Depending on the features used and permissions granted, CT-CRM may collect and process the following categories of information:

• Organizational Data: Each organization using CT-CRM operates within its own secure environment and authorized users can access information according to their assigned permissions.
• Customer Information: Authorized users within an organization may add and manage customer information, including:
  • Full name and contact information
  • Product or service information
  • Reference and relationship information
  • Address information
  • Bank account details where required for business or invoicing purposes
• User Account Information: We collect information required to create and manage user accounts, authenticate users, and control access to the CRM.
• Location Data: CT-CRM may collect the location of employees or field agents when location permission is granted and location tracking is enabled by the organization. Location information may be collected while an employee is actively "Clocked In" during their work shift.
• Call Log Data: If the user explicitly grants the applicable permission, CT-CRM may access call log information to help authorized organizational users maintain customer interaction history.

2. Location Data

CT-CRM may use device location services to support workforce, attendance, and field-activity management features.

Location data may be collected when an employee or field agent is actively "Clocked In" during a work shift. This may include collection while the application is running in the background. Background location access is used to maintain location-based attendance and field-work records when the employee's screen is turned off or when the employee is using other applications such as phone calls or navigation during their work activities.

Location data may be used for the following purposes:

• Recording attendance and work-shift activity
• Supporting field-agent work tracking
• Verifying visits to customer or assigned locations
• Calculating or supporting travel-related allowances
• Providing authorized managers with relevant field-work information
• Maintaining accurate work records while the employee is Clocked In

CT-CRM does not use location data for advertising or sell location information to third parties.

Location tracking is associated with the organization's workforce management functionality and is controlled through applicable device permissions and application settings. Users can manage location permissions through their device settings, subject to organizational requirements for attendance and field-work tracking.

3. How We Use Your Information

• To provide and operate the CT-CRM service
• To manage your organization's CRM environment
• To create and manage customer profiles
• To manage employee attendance and work shifts
• To support field-agent activity and customer visits
• To use location information for authorized workforce-management purposes
• To display relevant communication and phone activity information when permitted
• To provide secure authentication and access control
• To maintain and improve application functionality
• To protect the security and integrity of our services

4. Legal Basis for Processing

Depending on the applicable law and the nature of the processing, personal information may be processed based on:

• User or organizational consent where applicable
• Performance of a contract or provision of the requested service
• Legitimate interests such as security, workforce management, and service improvement
• Compliance with applicable legal obligations

5. Data Sharing and Disclosure

We do not sell or rent personal information or location information. Information may be shared only when necessary for providing the CT-CRM service or as permitted by applicable law.

• With authorized users and administrators within the customer's organization
• With service providers that support hosting, storage, security, or application functionality
• When required by applicable law or legal process

Third-party service providers are expected to process information only for authorized purposes and to maintain appropriate security safeguards.

6. Data Security

We implement reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction.

Security measures may include access controls, authentication, encryption, secure hosting environments, and role-based access restrictions.

7. Data Retention

We retain information for as long as reasonably necessary to provide the CT-CRM service, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce applicable agreements.

Organizations may request deletion or export of their data, subject to applicable legal, contractual, and operational requirements.

8. Your Rights and Choices

Depending on applicable law, you may have rights regarding your personal information, including the right to:

• Access and review personal information
• Request correction of inaccurate information
• Request deletion of information where applicable
• Withdraw consent where processing is based on consent
• Manage application permissions through your device settings

Location permissions can be managed through the device's permission settings. However, disabling location access may prevent certain attendance, field-work, or location-based CT-CRM features from functioning correctly.

9. Call Log Data

If applicable permission is explicitly granted, CT-CRM may access call log information to support customer communication tracking.

Call log information may be used to:

• Identify recent customer interactions
• Maintain communication history
• Provide context for customer service and follow-ups
• Support authorized CRM users in managing customer relationships

Call log data is not used for advertising and is not sold to third parties.

10. Children's Privacy

CT-CRM is intended for business and workforce-management purposes and is not directed toward children. We do not knowingly collect personal information from children where prohibited by applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, data-processing practices, or legal requirements.

The latest version of this Privacy Policy will be made available through the CT-CRM application and on our website.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: support@ct-crm.example.com